# AI governance insights Rangoon Insights reporting and guides tagged AI governance. Canonical: https://rangoon.ai/insights/tags/ai-governance/ ## Topics - [Agent systems](https://rangoon.ai/insights/topics/agents/): Agent runtimes, handoffs, tools, and the boundaries that make them reviewable. - [Governance](https://rangoon.ai/insights/topics/governance/): Policy, identity, authorization, approvals, and evidence for consequential work. - [Infrastructure](https://rangoon.ai/insights/topics/infrastructure/): Model serving, sandboxes, tool services, and deployment boundaries. - [Models](https://rangoon.ai/insights/topics/models/): Inference choices, local serving, compatibility, and operational tradeoffs. ## Stories - [FDA opened a public discussion on regulating GenAI-enabled medical devices](https://rangoon.ai/insights/archive-fda-genai-medical-device-discussion-august-2026/) FDA issued a GenAI-enabled medical-device discussion paper on August 18, 2026, seeking public input on risk, premarket evaluation and postmarket monitoring. - [UK’s third-party AI assurance roadmap mapped professionalization, information access and a planned innovation fund](https://rangoon.ai/insights/archive-uk-trusted-third-party-ai-assurance-roadmap-september-2025/) The UK published a third-party AI assurance roadmap on September 3, 2025, setting out government actions and future-market infrastructure rather than a new audit certification. - [Connecticut’s SB 10 put clinical-peer review ahead of AI or algorithms for a defined insurer decision](https://rangoon.ai/insights/archive-connecticut-sb10-clinical-peer-ai-review-june-2025/) Connecticut signed SB 10 on June 24, 2025, barring health carriers from using AI or another algorithm instead of clinical-peer review for adverse determinations. - [Nevada’s AB 325 put human final-decision boundaries around emergency AI use](https://rangoon.ai/insights/archive-nevada-ab325-emergency-ai-decisions-may-2025/) Nevada approved AB 325 on May 30, 2025, barring AI from making final emergency-response resource decisions and utility shutoff decisions during a disaster or emergency. - [NIST AI 100-2e2025 gave adversarial machine learning a shared taxonomy, not a risk tolerance rule](https://rangoon.ai/insights/archive-nist-adversarial-machine-learning-taxonomy-march-2025/) NIST published AI 100-2e2025 on March 24, 2025, organizing adversarial-machine-learning attacks and mitigations while leaving risk tolerance to the context of each use case. - [UK republished PPN 017 under new procurement terminology while preserving its optional AI-transparency questions](https://rangoon.ai/insights/archive-uk-ppn-017-ai-procurement-transparency-february-2025/) The UK’s February 17, 2025 PPN 017 update retained optional questions for surfacing AI use while aligning terminology and timing with the new procurement regime. - [Oregon’s AI Advisory Council delivered a five-action state-government plan](https://rangoon.ai/insights/archive-oregon-state-ai-action-plan-february-2025/) Governor Tina Kotek announced Oregon’s final state-government AI action plan on February 12, 2025, linking governance, security, privacy and workforce recommendations. - [UK’s AI Playbook expanded government guidance to ten principles across selection, deployment and assurance](https://rangoon.ai/insights/archive-uk-government-ai-playbook-february-2025/) The UK’s February 10, 2025 AI Playbook updated earlier generative-AI guidance with ten principles for public-sector AI selection, deployment and assurance. - [OECD launched the Hiroshima AI reporting framework, making comparable company disclosures the event—not proof of compliance](https://rangoon.ai/insights/archive-oecd-hiroshima-ai-reporting-framework-february-2025/) OECD launched a Hiroshima AI Process reporting framework on February 7, 2025, inviting advanced-AI organizations to disclose risk-management practices in a shared format. - [UK published an AI cyber-security code with 13 voluntary principles and an implementation guide](https://rangoon.ai/insights/archive-uk-ai-cyber-security-code-january-2025/) The UK published its AI Cyber Security Code of Practice on January 31, 2025, pairing voluntary principles for developers and operators with a practical implementation guide. - [FDA’s January AI-device lifecycle draft asked sponsors for an evidence trail, while remaining nonbinding and open for comment](https://rangoon.ai/insights/archive-fda-ai-device-lifecycle-draft-guidance-january-2025/) FDA’s January 7, 2025 draft proposed lifecycle and submission documentation for AI-enabled devices, but it was nonbinding draft guidance rather than a new enforceable rule. - [New York’s RAISE Act tied frontier-model duties to a December 2025 signing](https://rangoon.ai/insights/archive-new-york-raise-act-2025/) New York Governor Kathy Hochul signed the RAISE Act, S6953B/A6453B, on December 19, 2025; the enacted text sets an effective date 90 days later. - [NIST’s preliminary Cyber AI Profile framed AI security in three linked roles](https://rangoon.ai/insights/archive-nist-cyber-ai-profile-preliminary-draft-december-2025/) NIST released its preliminary Cyber AI Profile on December 16, 2025, framing AI cybersecurity around securing systems, defending with AI, and thwarting AI-enabled attacks. - [California announced companion-chatbot safeguards with SB 243 signing](https://rangoon.ai/insights/archive-california-sb-243-companion-chatbots-2025/) Governor Gavin Newsom announced the October 13, 2025 signing of California SB 243, describing companion-chatbot safeguards aimed at protecting children online. - [California’s SB 53 signing made frontier-AI transparency a state-law record](https://rangoon.ai/insights/archive-california-sb-53-signing-september-2025/) California signed SB 53 on September 29, 2025, establishing a frontier-AI transparency framework with reporting duties and whistleblower protections. - [Colorado’s 2025 special session delayed its AI Act before a 2026 rewrite](https://rangoon.ai/insights/archive-colorado-ai-act-delay-special-session-2025/) Colorado Governor Jared Polis signed SB25B-004 on August 28, 2025, extending the prior AI Act’s requirements to June 30, 2026 before a later 2026 replacement law. - [EU GPAI guidelines separated model-provider scope from the July code of practice](https://rangoon.ai/insights/archive-eu-gpai-guidelines-july-2025/) The European Commission published GPAI-provider guidelines on July 18, 2025, clarifying scope ahead of August obligations and distinct from the July 10 voluntary code. - [The EU GPAI Code made a voluntary route visible beside binding obligations](https://rangoon.ai/insights/archive-eu-gpai-code-practice-voluntary-compliance/) The European Commission received the General-Purpose AI Code of Practice in July 2025 as a voluntary tool, distinct from the AI Act obligations it was designed to address. - [Texas set a January 2026 start for its Responsible AI Governance Act](https://rangoon.ai/insights/archive-texas-responsible-ai-governance-act-2025/) Texas Governor Greg Abbott signed HB 149 on June 22, 2025, setting January 1, 2026 as the effective date for the Texas Responsible AI Governance Act. - [OMB M-25-21 made federal AI governance a delivery-and-trust record](https://rangoon.ai/insights/archive-omb-m-25-21-ai-governance-april-2025/) OMB Memorandum M-25-21, dated April 3, 2025, gave executive-branch agencies guidance on accelerating AI use through innovation, governance and public trust. - [The AI Act’s first February 2025 rules made inventory and literacy operational work](https://rangoon.ai/insights/archive-eu-ai-act-first-rules-february-2025/) EU AI Act prohibitions, definitions and AI-literacy provisions started applying on February 2, 2025, creating a dated review point for providers and deployers. - [Executive Order 14179 reset an AI policy direction and ordered an action plan](https://rangoon.ai/insights/archive-executive-order-14179-january-2025/) Executive Order 14179, issued January 23, 2025, revoked specified prior AI policy actions and directed development of an AI Action Plan within 180 days. - [Anthropic’s Singapore MOU: cooperation is not deployment assurance](https://rangoon.ai/insights/anthropic-singapore-mou-deployment-evidence/) Anthropic announces a Singapore office and government MOU. Analysis separates international cooperation from workload approval, processing-location evidence and agent authority. - [White House SI terminology order: what changes for federal AI governance](https://rangoon.ai/insights/white-house-super-intelligence-si-terminology/) Executive Order 14434 changes executive-branch terminology to Super Intelligence and SI. Agencies still need separate controls for systems, data and execution authority. ## More information - [Documentation index](https://rangoon.ai/llms.txt) - [AI access and policies](https://rangoon.ai/ai/) - [Source repository](https://github.com/hypler-dev/rangoon)